Files
splunk-security_content/macros/process_curl.yml
mhaag-spl f7112aca62 fixes
2021-10-20 07:08:14 -06:00

3 lines
225 B
YAML

definition: (Processes.process_name=curl.exe OR Processes.original_file_name=Curl.exe)
description: Matches the process with its original file name, data for this macro came from https://strontic.github.io/
name: process_curl